Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UCFz6ESN2fck4l2pxcID4EQUgpQ.cer
File: UCFz6ESN2fck4l2pxcID4EQUgpQ.cer (raw, json)
Hash identifier: Fu+dCsHdzkW+qKFwEMnSROWAMvYOpBr/4fUlXkUPK+w=
Subject key identifier: 50:21:73:E8:44:8D:D9:F7:24:E2:5D:A9:C5:C2:03:E0:44:14:82:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC44A0CD3B1B60590A7C615346B35A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/dc9f19-86ea-4eae-a33c-62d23272b985/1/UCFz6ESN2fck4l2pxcID4EQUgpQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/dc9f19-86ea-4eae-a33c-62d23272b985/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210285
Validation: Failed, certificate revoked on Tue 12 Mar 2024 11:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:44:a0:cd:3b:1b:60:59:0a:7c:61:53:46:b3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=502173e8448dd9f724e25da9c5c203e044148294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:3c:41:25:e8:db:33:da:81:b4:d9:b0:56:
dc:20:2f:05:96:8c:00:79:43:a8:5f:de:b0:3a:18:
87:e8:5e:41:13:d1:4d:be:43:d8:4d:c4:c2:93:dd:
86:63:f3:60:d4:d7:72:50:9f:c4:d8:4c:50:5b:95:
70:40:46:50:b7:de:4a:b3:78:6b:e2:9b:69:dc:d7:
75:4f:d7:c9:5d:ef:9b:8a:ec:16:3e:c7:3b:d2:52:
cf:28:ec:f2:75:e7:77:9d:73:1d:6f:89:fb:d5:dd:
f0:02:ee:88:88:20:89:33:ac:13:f0:31:cf:e9:bc:
37:eb:e8:90:c1:1b:69:50:76:9e:a4:6c:f4:80:91:
0d:29:b4:8c:67:df:7c:d6:fb:aa:01:7f:70:e4:d1:
46:f0:ce:cb:47:96:12:3e:4a:3d:a1:cc:6e:b8:2d:
6e:29:56:0f:4c:78:9e:84:00:14:ea:71:da:c0:41:
58:d9:74:d1:53:56:52:60:e2:e0:24:d3:2a:ae:29:
2e:2d:c9:64:b4:f0:c5:8d:15:96:a1:11:83:1d:d3:
3a:1c:0e:15:d8:4a:11:c0:f8:87:dd:86:f6:48:32:
e6:6c:b5:40:9a:0e:2c:5f:9c:a9:91:8a:ad:a7:f8:
f1:ac:34:10:82:f0:ad:bc:22:04:45:8b:71:36:ef:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:21:73:E8:44:8D:D9:F7:24:E2:5D:A9:C5:C2:03:E0:44:14:82:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc9f19-86ea-4eae-a33c-62d23272b985/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc9f19-86ea-4eae-a33c-62d23272b985/1/UCFz6ESN2fck4l2pxcID4EQUgpQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210285
Signature Algorithm: sha256WithRSAEncryption
9a:ef:cc:9c:c6:4d:7f:6a:3d:9d:38:13:d6:c3:4e:46:94:5e:
7a:a6:c1:cd:f3:1e:6e:53:cc:a4:59:4a:91:be:7a:4d:11:59:
aa:9f:8e:cb:41:b5:08:94:5a:b7:a1:ad:be:73:d6:fa:f8:91:
ac:18:9d:e6:a3:d6:75:2c:a9:4b:9f:66:80:0a:33:52:43:ca:
69:95:7c:12:03:72:d5:d7:ce:81:12:cc:8e:1f:16:da:b5:12:
30:7e:10:21:9e:a2:8b:38:60:83:08:4f:70:26:f6:31:71:fe:
3d:11:9d:69:7b:dd:57:05:f6:63:3e:69:be:51:45:d3:53:3a:
6c:a7:0a:5f:4d:f1:0b:7a:73:14:69:82:b4:77:8f:01:9a:2f:
73:3a:f7:0d:3f:6b:af:9b:06:82:06:05:28:65:d2:d5:f8:b4:
3a:6e:8d:92:8c:d4:d2:fd:47:07:b1:a6:3e:33:e8:25:32:b1:
9c:3d:ff:fa:cf:ed:62:57:33:d3:72:9a:ba:9c:72:fe:a5:25:
66:e3:c5:42:9f:39:5e:c7:70:a3:dc:f0:c0:ff:8f:41:b3:09:
32:52:36:03:d6:39:e6:ac:62:0d:2c:e1:ef:c7:90:cd:62:27:
70:ab:b6:f6:94:79:54:4d:38:57:b8:b6:3c:01:64:48:e0:c1:
ee:25:e7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-fra.rpki-client.org